Static task
static1
Behavioral task
behavioral1
Sample
f65dc2b543c8780dc487ce982b2c60b8d3e1274349b3c05fcb613d659007942a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f65dc2b543c8780dc487ce982b2c60b8d3e1274349b3c05fcb613d659007942a.exe
Resource
win10v2004-20220812-en
General
-
Target
f65dc2b543c8780dc487ce982b2c60b8d3e1274349b3c05fcb613d659007942a
-
Size
308KB
-
MD5
5e90dcdf999df34b2ac6f56dc6c3f3e0
-
SHA1
651155fdc5d4b6fea4c12c0a1287ee36bdee8f16
-
SHA256
f65dc2b543c8780dc487ce982b2c60b8d3e1274349b3c05fcb613d659007942a
-
SHA512
8112d5ff5a1d24dfca2ee5c52cc8545ee25f028e1978e25f9fde534ee69c0b5186572d5e0cf1ec340c7593fe3fd831cc769e17fbb95168570f0c922d5e710918
-
SSDEEP
6144:NLOd2t0ieQs6LJpw8isrmdh7tJKX/uesDP6tzOrAbNHjP/BSHGBB:NLOdcEen9mDOXHWeMG
Malware Config
Signatures
Files
-
f65dc2b543c8780dc487ce982b2c60b8d3e1274349b3c05fcb613d659007942a.exe windows x86
9c876369852e4ef1afea0695f85afed3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
HeapFree
ResumeThread
DeviceIoControl
DeleteFileA
GetPrivateProfileIntW
GetCurrentProcess
GetPrivateProfileSectionA
ClearCommBreak
SetLastError
GetStringTypeA
GetFileAttributesA
GetProcessHeap
CreateEventW
OpenMutexW
TlsGetValue
LoadLibraryA
lstrlenA
GetDriveTypeA
HeapDestroy
VirtualProtectEx
uxtheme
GetThemeColor
GetThemeSysSize
GetWindowTheme
GetThemeBool
GetThemeTextExtent
CloseThemeData
DrawThemeEdge
IsThemeActive
SetWindowTheme
DrawThemeBackground
CloseThemeData
GetThemeTextMetrics
OpenThemeData
odbctrac
TraceSQLAllocStmt
TraceSQLAllocConnect
TraceSQLAllocEnv
TraceSQLBindCol
msasn1
ASN1BERDecBool
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ